FUNCTIONAL INTERPRETATION AND 
INDUCTIVE DEFINITIONS 



JEREMY AVIGAD AND HENRY TOWSNER 

Abstract. Extending Godel's Dialectica interpretation, we provide a func- 
tional interpretation of classical theories of positive arithmetic inductive defi- 
nitions, reducing them to theories of finite-type functionals defined using trans- 
finite recursion on well-founded trees. 



1. Introduction 

Let X be a set, and let F be a monotone operator from the power set of X to 
itself, so that AC B impHes T{A) C r{B). Then the set 

I = f]{A\riA)CA} 

is a least fixed point of F; that is, F(/) — I, and / is a subset of any other set 
with this property. / can also be characterized as the limit of a sequence indexed 
by a sufficiently long segment of the ordinals, defined by Iq = 0, la+i = F(/q), 
and I\ = 1J7<A -^7 ^'^^ limit ordinals 7. Such inductive definitions are common 
in mathematics; they can be used, for example, to define substructures generated 
by sets of elements, the collection of Borel subsets of the real line, or the set of 
well-founded trees on the natural numbers. 

From the point of view of proof theory and descriptive set theory, one is often 
interested in structures that are countably based, that is, can be coded so that 
X is a countable set. In that case, the sequence la stabilizes before the least 
uncountable ordinal. In many interesting situations, the operator F is given by a 
positive arithmetic formula ip{x,P), in the sense that T{A) = {x \ ip{x,A)} and 
if is an arithmetic formula in which the predicate P occurs only positively. (The 
positivity requirement can be expressed by saying that no occurrence of P is negated 
when if is written in negation-normal form.) 

The considerations above show that the least fixed point of a positive arithmetic 
inductive definition can be defined by a 11} formula. An analysis due to Stephen 
Kleene [20l [21] shows that, conversely, a positive arithmetic inductive definition 
can be used to define a complete 11} set. In the 1960's, Georg Kreisel presented 
axiomatic theories of such inductive definitions [521 [H]- In particular, the theory 
IDi consists of first-order arithmetic augmented by additional predicates intended 
to denote least fixed-points of positive arithmetic operators. IDi is known to have 
the same strength as the subsystem n}-CA of second order arithmetic, which has 
a comprehension axiom asserting the existence of sets of numbers defined by 11} 
formulas without set parameters. It also has the same strength as Kripkc Platek 
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admissible set theory, KPlu, with an axiom asserting the existence of an infinite 
set. (See [9l[l9| for details.) 

A 112 sentence is one of the form Va; 3y R{x,y), where x and y are tuples of 
variables ranging over the natural numbers, and i? is a primitive recursive relation. 
Here we are concerned with the project of characterizing the 112 consequences of 
the theories ID^ in constructive or computational terms. This can be done in a 
number of ways. For example, every 112 theorem of IDj is witnessed by a function 
that can be defined in a language of higher-type functionals allowing primitive 
recursion on the natural numbers as well as a schema of recursion along well- 
founded trees, as described in Section [2] below. We are particularly interested in 
obtaining a translation from IDi to a constructive theory of such functions that 
makes it possible to "read off" a description of the witnessing function from the 
proof of a 112 sentence in IDj . 

There are currently two ways of obtaining this information. The first involves 
using ordinal analysis to reduce IDj to a constructive analogue [H [26l [27] , such as 
the theory ID^'"^ discussed below, and then using either a realizability argument or 
a Dialectica interpretation of the latter [HI [7] . One can, alternatively, use a forcing 
interpretation due to Buchholz I7l|2] to reduce ID 2 to ID]'^^ . 

Here we present a new method of carrying out this first step, based on a func- 
tional interpretation along the lines of Godel's "Dialectica" interpretation of first- 
order arithmetic. Such functional interpretations have proved remarkably effective 
in "unwinding" computational and otherwise explicit information from classical ar- 
guments (see, for example, [22l [23l HI]). Howard [18] has provided a functional 
interpretation for a restricted version of the constructive theory ID\'^^ , but the 
problem of obtaining such an interpretation for classical theories of inductive def- 
initions is more difficult, and was posed as an outstanding problem in [51 Section 
9.8]. Feferman [12] used a Dialectica interpretation to obtain ordinal bounds on the 
strength of IDi (the details are sketched in [6] Section 9]), and Zucker [36] used a 
similar interpretation to bound the ordinal strength of IDg. But these interpreta- 
tions do not yield H2 reductions to constructive theories, and hence do not provide 
computational information; nor do the methods seem to extend to the theories be- 
yond ID 2 ■ Our interpretation bears similarities to those of Burr [TU] and Ferreira 
and Oliva [13], but is not subsumed by either; some of the differences between the 
various approaches are indicated in Section [4] 

The outline of the paper is as follows. In Section [2 we describe the relevant 
theories and provide an overview of our results. Our interpretation of IDi is pre- 
sented in three steps. In Section[31 we embed IDi in an intermediate theory, OIDi , 
which makes the transfinite construction of the fixed-point explicit. In Section [J] 
we present a functional interpretation that reduces OIDi to a second intermediate 
theory, Qg Tq + {I) ■ Finally, the latter theory is interpreted in a constructive the- 
ory, QTq^ using a cut elimination argument in Section[5| In Section[6l we show that 
our interpretation extends straightforwardly to cover theories of iterated inductive 
definitions as well. 

We are grateful to Solomon Feferman, Philipp Gerhardy, Paulo Oliva, and Wil- 
fried Sieg for feedback on an earlier draft; and we are especially grateful to Fernando 
Ferreira for a very careful reading and substantive corrections. 
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2. Background 

In this paper, we interpret classical theories of inductively defined sets in con- 
structive theories of transfinite recursion on well-founded trees. In this section, we 
describe the relevant theories, and provide an overview of our results. 

Take classical first-order Peano arithmetic, PA, to be formulated in a language 
with symbols for each primitive recursive function and relation. The axioms of PA 
consist of basic axioms defining these functions and relations, and the schema of 
induction, 

1^9(0) A Vx {ip{x) ip{x + 1)) \fx ip{x), 
where if is any formula in the language, possibly with free variables other than x. 
ID2 is an extension of PA with additional predicates intended to denote the least 
fixed point of the positive arithmetic operator given by ^p. Specifically, let ^p{x, P) 
be an arithmetic formula with at most the free variable x, in which the predicate 
symbol P occurs only positively. We adopt the practice of writing a; G instead 
of I^{x). ID I then includes the following axioms: 

• Vx (ipix,!^) X e I^) 

• Vx {ipix, 0/P) 9{x)) ^Wx e 9{x), for each formula 9{x). 

Here, the notation ip{9/P) denotes the result of replacing each atomic formula P{t) 
with 9{t), renaming bound variables to prevent collisions. The first axiom asserts 
that is closed with respect to , while the second axiom schema expresses that 
is the smallest such set, among those sets that can be defined in the language. 
Below we will use the fact that this schema, as well as the schema of induction, 
can be expressed as rules. For example, /^-leastness is equivalent to the rule "from 
Vx {ip{x,9'/P) 9'{x)) conclude Va; G 9'{x)" To see this, note that the rule 
is easily justified using the corresponding axiom; conversely, one obtains the axiom 
for 9{x) by taking 9'{x) to be the formula (Vz {il;{z,9/P) 9{z))) 9{x) in the 
rule. 

One can also design theories of inductive definitions based on intuitionistic logic. 
In order for these theories to be given a reasonable constructive interpretation, 
however, one needs to be more careful in specifying the positivity requirement on ip. 
One option is to insist that P does not occur in the antecedent of any implication, 
where -177 is taken to abbreviate rj —>■ Such a definition is said to be strictly 
positive, and we denote the corresponding axiomatic theory ID\'^^ . An even more 
restrictive requirement is to insist that is of the form \/y ~< x P{y), where -< 
is a primitive recursive relation. These are called accessibility inductive definitions, 
and serve to pick out the well-founded part of the relation. In the case where ~< is 
the "child-of" relation on a tree, the inductive definition picks out the well-founded 
part of that tree. We will denote the corresponding theory ID\'°''^'^ . 

The following conservation theorem can be obtained via an ordinal analysis [9] 
or the methods of Buchholz [7] : 

Theorem 2.1. Every H2 sentence provable in IDj is provable in ID\'°''^'^ . 

The methods we introduce here provide another route to this result. 

Using a primitive recursive coding of pairs and writing x d ly for (x, y) G / 
allows us to code any finite or infinite sequence of sets as a single set. One can 
show that in any of the theories just described, any number of inductively defined 
sets can coded into a single one, and so, for expository convenience, we will assume 
that each theory uses only a single inductively defined set. 
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We now turn to theories of transfinite induction and recursion on well-founded 
trees. The starting point is a quantifier- free theory, Tq^ of computable functionals 
over the natural numbers and the set of well-founded trees on the natural numbers. 
In particular, Tq extends Godel's theory T of computable functionals over the 
natural numbers. We begin by reviewing the theory T . The set of finite types is 
defined inductively, as follows: 

• A'^ is a finite type; and 

• assuming a and r are finite types, so are ct x t and cr — > t. 

In the "full" set-theoretic interpretation, N denotes the set of natural numbers, crxr 
denotes the set of ordered pairs consisting of an element of cr and an element of r, 
and (T — > r denotes the set of functions from a to r. But we can also view the finite 
types as nothing more than datatype specifications of computational objects. The 
set oi primitive recursive functionals of finite type is a set of computable functionals 
obtained from the use of explicit definition, application, pairing, and projections, 
and a scheme allowing the definition of a new functional F by primitive recursion: 

F(0) = a 
F{x + l)^G{x,F{x)) 

Here, the range of F may be any finite type. The theory T includes defining 
equations for all the primitive recursive functionals, and a rule providing induction 
for quantifier-free formulas ip: 

^{0) ^{x) ^ ^{S{x)) 
Godel's Dialectica interpretation shows: 

Theorem 2.2. If PA proves a 1^2 theorem \/x 3y R{x,y), there is a sequence of 
function symbols f such that T proves R{x, f(x)). In particular, every II2 theorem 
of PA is witnessed by sequence of primitive recursive functionals of type N'^ — > N. 

See [121 m ISS] for details. If (st) is used to denote the result of applying s to 
t, we adopt the usual conventions of writing, for example, stuv for {{{st)u)v). To 
improve readability, however, we will also sometimes adopt conventional function 
notation, and write s{t^u,v) for the same term. 

In order to capture the 112 theorems of IDi , we use an extension of T that is 
essentially due to Howard [18], and described in [6l Section 9.1]. Extend the finite 
types by adding a new base type, Q, which is intended to denote the set of well- 
founded (full) trees on N. We add a constant, e, which denote the tree with just 
one node, and two new operations: sup, of type (N — > O) — > £7, which forms a new 
tree from a sequence of subtrees, and sup^^, of type fl {N — > fl), which returns 
the immediate subtrees of a nontrivial tree. We extend the schema of primitive 
recursion on in T to the larger system, and add a principle of primitive recursion 
on fl: 

F{e) = a 
F(sup h) = G{\n F{h{n))), 

where the range of F can be any of the new types. We call the resulting theory Ti2, 
and the resulting set of functionals the primitive recursive tree functionals. Below 
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we will adopt the notation a[n] instead of sup ^{a,n) to denote the nth subtree of 
a. In that case definition by transfinite recursion can be expressed as followsQ 

a if a = e 

G{Xn F{a[n])) otherwise. 

A trick due to Kreisel (see [171 HH]) allows us to derive a quantifier-free rule of 
transfinite induction on Q in Tq, using induction on and transfinite recursion. 

Proposition 2.3. The following is a derived rule of Tq: 

ip{e, x) a ^ e f\ Lp{a[g{a, x)], h(a, x)) — > 'p{a, x) 
f{s,t) 

for quantifier-free formulas ip. 

For the sake of completeness, we sketch a proof in the Appendix. 

We define QT;^ to be the extension of T/^ which allows quantifiers over all the 
types of the latter theory, strengthening the previous transfinite induction rule with 
a full transfinite induction axiom schema, 

Lp{e) A Va (a ^ e A Vn (y5(a[n]) ^ Va ip{a) 

where ip is any formula in the expanded language. Let QT^2 denote the version of 
this theory based on intuitionistic logic. 

We can also add to QT}2 an lu -bounding axiom schema, 

\/x 3a ipix, a) 3/3 Va; 3i tpi^, l3[i]), 

where x is of type A^, a is of type Q, and ip only has quantifiers over A^. The 
following theorem shows that all of the intuitionistic theories described in this 
section are "morally equivalent," and reducible to T^- 

Theorem 2.4. The following theories all prove the same II2 sentences: 

(1) ID'f'P 

(2) ID'/"'' 

(3) QT^2 + {(^-bounding) 

(4) QTh 

(5) To 

Proof. Buchholz [7j presents a realizability interpretation of ID^''^^ in the theory 
jjji^,acc^ Howard [18j presents an embedding of in QT'^2 + {uj- bounding). 

Howard [18j also presents a functional interpretation of QT^2 + (uj-bounding) in 
Tn, which is included in QTq] Proposition 12.31 is used to interpret the transfinite 
induction axioms of the source theory. Interpreting Tq in ID]^"^ is straightforward, 
using the set O of Church-Kleene ordinal notations to interpret the type fi, and 
interpreting the constants of Tq as hereditarily recursive operations over O (see [6l 
Sections 4.1, 9.5, and 9.6]). □ 



^We are glossing over issues involving the treatment of equality in our descriptions of both 
T and Tq. All of the ways of dealing with equality in T described in [6] Section 2.5] carry 
over to Tq , and our interpretations work with even the most minimal version of equality axioms 
associated with the theory denoted Tg there. In particular, our interpretations to not rely on 
extensionality, or the assumption Vn {a[n] = /3[n]) — > a = /3. 

Our theory Tq is essentially the theory V of Howard |18| . Our theory QT^ is essentially a 
finite-type version of the theory U of 18 , and contained in the theory V described there. One 
minor difference is that Howard takes the nodes of his trees to be labeled, with end-nodes labeled 
by a positive natural number, and internal nodes labeled 0. 
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In fact, Howard's work [18] shows that Theorem 12.41 stiU holds as stated if one 
allows arbitrary formulas 'ip{x,a) of QT}2 in the w-bounding axiom schema. In the 
classical theories considered below, however, the restriction to arithmetic quanti- 
fiers is necessary. We have therefore chosen to use the name {oj-bounding) for the 
restricted version. 

We can now describe our main results. In Sections [3] to [5l we present the inter- 
pretation outlined in the introduction, which yields: 

Theorem 2.5. Every H2 sentence provable in IDi is provable in QTq. 

In fact, if ID I proves a 112 theorem \/x 3y R{x,y), our proof yields a sequence 
of function symbols / such that QT^ proves R{x, f{x)). By Theorem l2.41 this last 
assertion can even be proved in Tq. Thus we have: 

Theorem 2.6. If IDi proves a TI2 theorem \/x 3y R{x,y), there is a sequence 
of function symbols f such that Tq proves R{x,f{x)). In particular, every H2 
theorem of IDi is witnessed by sequence of primitive recursive tree functionals of 
type N. 

The reduction described by Sections [3] to [5] is thus analogous to the reduction 
of IDi given by Buchholz [7], but relies on a functional interpretation instead of 
forcing. 

3. Embedding IDi in OIDi 

In this section, we introduce a theory OIDi , which makes the transfinite con- 
struction of the fixed points of IDi explicit. We then show that IDi is easily 
interpreted in OID^ . The theory OIDi is closely related to Feferman's theory 
OR'f, as described in [1^ and [SI Section 9], and the embedding is similar to the 
one described there. 

Fix any instance of IDi with inductively defined predicate / given by the positive 
arithmetic formula tp{x, P). The corresponding instance of OIDi is two-sorted, with 
variables a, 7, . . . ranging over type SI, and variables i, j, k,n,x, . . . ranging over 
N . We include symbols for the primitive recursive functions on N , and a function 
symbol sup~^(a,n) which returns an element of type Q,. As above, we write a[n] 
for sup~^(a,n). Recall that a[n] is intended to denote the nth subtree of a, or e 
if a = e. The language includes an equality symbol for terms of type N , but not 
for terms of type fi. We include, however, a unary predicate "a = e," which holds 
when a is the tree with just one node. Finally, there is a binary predicate /(a, x), 
where a ranges over SI and x ranges over N . We will write x € la instead of I{a, x), 
and write x € I^a for 3i {x G Ia[i])- The axioms of OID^ are as follows: 

(1) defining axioms for the primitive recursive functions 

(2) induction on N 

(3) transfinite induction on 

(4) a — e ^ a[i] = e 

(5) the schema of uj-bounding: 

\fx 3a ip{x, a) — » 3/3 \/x 3i (p{x, /?[«]), 

where </? has no quantifiers over type SI. 

(6) Vx {x^h) 

(7) Va (a 7^ e ^ Vx (x G /q ^ il){x,I^a))) 
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The last two axioms assert that la is the hierarchy of sets satisfying le ~ % and 
la — r^(/^ct) when a ^ e. For any formula ip of IDi , let (p be the formula obtained 
by interpreting i G / as 3a {t G 

Theorem 3.1. If IDi proves ip, then OIDi proves (p. 

We need two lemmas. In the first, let I^a ^ I^fi abbreviate the formula Vx {x G 

Lemma 3.2. OIDi proves that for every a and i, I-^a[i] ^ I-^a- 

Proof. Use transfinite induction on a. If a is equal to e, the conclusion is immediate 
from the fourth axiom. In the inductive step, suppose x is in Then for some 

j, X is in Ia[i\\j\- By the last axiom, we have i^ix, By the inductive 

hypothesis, we have I^a[i][j] ^ I-<a[i]-, and so, by the positivity of ■01 we have 
'ip{x, I^a[i])- By the last axiom again, we have x G Ia[i\^ and hence x G /^q, as 
required. □ 

Note that if 77(2;, P) is any arithmetic formula involving a new predicate symbol 
P and 9[y) is any formula, applying the -translation to rj{x^ / P) changes only the 

instances of 9. In particular, rj(x, I) is ri{x, 3a (y G la)/ P). 

Lemma 3.3. Let ri{x, P) be a positive arithmetic formula. Then OIDi proves that 
r]{x,I) implies 3a ri{x, I^a)- 

Proof. Use induction on positive arithmetic formulas, expressed in negation-normal 
form. To handle the base case where ri{x,I) is a; G /, suppose we have x G Ifi. By 
a trivial instance of w-bounding, there are an a and an i such that x is in I^ii] . But 
this means that x is in I^a, as required. 

All the other cases are easy, except when the outermost connective is a universal 
quantifier. In that case, suppose OIDi proves that 1^9(2;, y, /) implies 3/3 p(x, y, I^p). 
Using w bounding, Vy p{x, y, I) then implies 3a Vy 3i p{x, y, I^a[i\)- By Lemma|321 
and positivity, OID^ proves 3q! Vy p{x,y, I^a), as required. □ 

Proof of Theorem \3.1l The defining axioms for the primitive recursive functions 
and induction axioms of IDj are again axioms of OID^ under the translation, so 
we only have to deal with the defining axioms for /. 

To verify the translation of the closure axiom in OIDi, suppose ip(x,I). By 
Lemma 13.31 we have 3a ^{x, I^a), which implies 3a (x G /q.), as required. 

This leaves only the leastness property of /, which can be expressed as a rule, 
"from Va; {ip{x,9/P) 9{x)), conclude Vx E I 6'(a;)." To verify the translation in 
OID2 , suppose Vx {ip{x, 9/P) — > 9{x)). It suffices to show that for every a, we have 
Vx G la 9{x). We use transfinite induction on a. In the base case, when a = e, 
this is immediate from the defining axiom for /g. In the inductive step, suppose we 
have V« Va; G Ia[i\ 9{x). This is equivalent to V.t G I-^a 9(x). Using the positivity of 
P, we have Va; {ip{x,I^a) '4'{x,9/P)). Using the definition of /„, we then have 
Vx G la 9{x), as required. □ 

4. A FUNCTIONAL INTERPRETATION OF OIDi 

Our next step is to interpret the theory OIDi in a second intermediate theory, 
QoTu + (I)- First, we describe a fragment QoTq of QTq, which is obtained by 
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restricting the language of QTn to allow quantification over the natural numbers 
only, though we continue to allow free variables and constants of all types. We also 
restrict the language so that the only atomic formulas are equalities s = t between 
terms of type N. The axioms of Qo Tq are as follows: 

(1) any equality between terms of type N that can be derived in Tq 

(2) the schema of induction on N . 

(3) the schema of transfinite induction, given as a rule: 

61(e) a ^ e h\ln e{a[n]) e{a) 
W) 

for any formula 9 and term t of type 17. 

In the transfinite induction schema, the formula a = e is should be understood as 
the formula /(a) = 0, where / is the function from to N defined recursively by 
/(e) = 0, /(sup g) = I. Substitution is a derived rule in Qo Tq, which is to say, if 
the theory proves </3(x) where a; is a variable of any type, it proves ^p{s) for any term 
s of that type. One can show this by a straightforward induction on proofs, using 
the fact that any substitution instance of one of the axioms or rules of inference 
above is again an axiom or rule of inference. Similarly, by induction on formulas 
(^(x), one can show that if Tq proves s = t for any terms s and t of the appropriate 
type, then QqTq proves ip{s) ^ f{t)- 

The following proposition shows that in Qo Tq we can use instances of induction 
in which higher-type parameters are allowed to vary. For example, the first rule 
states that in order to prove 9[a, x) for arbitrary a and x, it suffices to prove 6{e, x) 
for an arbitrary x, and then, in the induction step, prove that 9{a, x) follows from 
0(a[n],a), as n ranges over the natural numbers and a ranges over a countable 
sequence of parameters depending on n and x. 

Proposition 4.1. The following are derived rules of Qo Tq: 

9{e, x) a 7^ e A Vi Vj' 6'(a[i], /(a, x, 9(a, x) 

9{a, x) 

and 

■0(0, x) Vj ip{n, f{x,n,j)) -» ip{n + l,x) 
tp{n,x) 

For a fixed instance of IDi , we now define the theory Qo Tq + (/) by adding 
a new binary predicate /(a,x), which is allowed to occur in the induction axioms 
and the transfinite induction rules, and the following axioms: 

(4) VX (X ^/e). 

(5) Va (a 7^ e ^ Vx (x G /q, ^ ip{x, I^a)))- 

(6) s E la ^ t E 1/3 whenever s, a, i, and P are terms such that Tq proves 
s = t and a = p. 

Proposition 14. II extends to this new theory, as does the substitution rule. Thanks 
to axiom (6), if (p{x) is any formula of Qo Tq + (/) and s and t are any terms such 
that Tq proves s = t, then Qo Tq + (I) proves (p{s) ^ ^(t). 

The goal of this section is to use a functional interpretation to interpret OZDj 
in Qo Tq + (/). As in Burr [10], we use a variant of Shoenfield's interpretation [29] 
which incorporates an idea due to Diller and Nahm [11]. The Shoenfield interpre- 
tation works for classical logic, based on the connectives V, V, and This has the 
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virtue of cutting down on the number of axioms and rules that need to be verified, 
and keeping complexity down. Alternatively, we could have used a Diller-Nahm 
variant of the ordinary Godel interpretation, combined with a double-negation in- 
terpretation. The relationship between the latter approach and the Shoenfield 
interpretation is now well understood (see [33l [3]). 

First, we need to introduce some notation. We will often think of an element 
a ^ e of 17 as denoting a countable set {a[i] | i e N} of elements of fl. Within the 
language of QTq, we therefore define a □ /3 by 

a C /3 = 3j (aW = /3[j]), 

expressing inclusion between the corresponding sets. Let t{i) be any term of type 
17, where i is of type N . Then we can define the union of the sets t(0), t(2), . . . 

by 

Uit{i) = supt(jo)[ji], 

3 

where jo and ji denote the projections of j under a primitive recursive coding 
of pairs. In other words, U,;t(i) represents the set {t{i)[k] j « £ N, fc G N}. In 
particular, we have that for every i, t{i) C Uii(i), since for every k we have t{i)[k] = 
{Uit{i))[{i , k)]. Binary unions, s U can be defined in a similar way. 

We can extend these notions to higher types. Define the set of pure fl-types to be 
the smallest set of types containing D, and closed under the operation taking a and 
T to a ^ T. Note that every pure f2-type r has the form cti ^ 1T2 ^ ■ • ■ ffc — > 17. 
We can therefore lift the notions above to a, b, and t of arbitrary pure type, by 
defining them to hold pointwise, as follows: 

a[i] = Xx {{ax)[i]) 
a ^ b = \fi 3j Va; ((ax)[i] = (fe.T)[j]) 

Uit = \x (Ui(te)) 
s U t = Ax ((sx) U (te)), 

where in each case a; is a tuple of variables chosen so that the resulting term has type 
17. Thus, if a is of any pure type, we can think of a as representing the countable 
set {a[j] I i G N}, in which case C and U have the expected behavior. 

Below we will be interested in the situation where Tq can prove a C 6 in the 
sense that there is an explicit term /(i), not involving x, such that Tq proves 
(ax)[i] = Notice that when Tq proves a C 6 in this sense, QqTq + (I) 

proves '/5(a[i]) (f{b[f{i)]) for any formula (p, and hence 3i ^ 3j (p{b[j]). 

Notice also that Tq proves t{i) C \-iit{i), s C s U t, and t C s U t in this sense. 

To each formula Lp in the language of OIDj , we associate a formula (p^ of the 
form Va 36 1^5(0, b), where a and b are tuples of variables of certain pure 17- types 
(which are implicit in the definitions below), and ips is a formula in the language 
of QqTq + (J). The interpretation is defined, inductively, in such a way that the 
following monotonicity property is preserved: whenever Tq proves 5 C 6' in the 
sense above, Qo Tq + (/) proves (^55 (a, b) — > ps{a, b'). In the base case, we define 

lia^tf EE I{a,t) 
{s^tf = s = t 
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In the inductive step, suppose is Va 36 (ps{a,, b) and is Vc 3d i^s{c, d). Then 
we define 

Va, c 36, d {ipsia, b) V tpsic, d)) 

Va 36 (\fx ips{a, b)) 

Va, a 36 iy9s(a, b) 

VB 3a (3i ^(^s(a[z],B(a[i]))). 

Verifying the monotonicity claim above is straightforward; the inner existential 
quantifier in the clause for negation takes care of the only case that would other- 
wise have given us trouble. Note in particular the clause for universal quantification 
over the natural numbers. Our functional interpretation is concerned with bounds; 
because we can compute "countable unions" using the operator U, we can view 
quantification over the natural numbers as "small" and insist that the bound pro- 
vided by 6 is independent of x. Note also that if (/? is a purely arithmetic formula, 
ip^ is just ip. 

The rest of this section is devoted to proving the following: 

Theorem 4.2. Suppose OIDj proves (p, and (p^ is the formula Va 36 955(0,6). 
Then there are terms b of Tq involving at most the variables a and the free variables 
of p of type r2 such that Qg Tq + (/) proves ipsioL, b). 

Importantly, the terms 6 in the statement of the theorem do not depend on the 
free variables of ip of type TV. 

As usual, the proof is by induction on derivations. The details are similar to 
those in Burr [TOl. As in Shoenfield [29], we can take the logical axioms and rules 
to be the following: 

(1) excluded middle: ^ip V (p 

(2) substitution: Va; ^(x) vit), and Va p{a) (p{t) 

(3) expansion: from tp conclude (p V ip 

(4) contraction: from ipM Lp conclude (p 

(5) cut: from ip\J il) and ^p V 6*, conclude ipV 9. 

(6) V-introduction: from p>\/ conclude \fx ip\/ ip, assuming x is not free in -0; 
and similarly for variables of type f2 

(7) equality axioms 

The translation of excluded middle is 

VB, a' 3a, 6' {3i ^ips{a[il B{a[i])) V p>s{a', b')). 

Given B and a', let a = supj a', so that a[i] = a' for every i; in other words, a 
represents the singleton set {a'}. Let 6' = B{a'). Then the matrix of the formula 
holds with i = Q. 

The translation of substitution for the natural numbers is equivalent to 

Vi?, a' 3a, 6' (Vi, x (ps{x, a[i], B{a[i])) ^sit, b')). 

(In this context, "equivalent to" means that Qg Tq + {I) proves that the -5 part of 
the translation is equivalent to the expression in parentheses.) Once again, given 
B and a', letting a = supj a' and 6' = B{a') works. 

Handling substitution for f2 and expansion is straightforward. Consider the 
contraction rule. By the inductive hypothesis we have terms 6 = 6(a,c) and d — 



{ipyi^f = 

(Vx pf = 
(Va 'pf = 
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d{a, c) satisfying 

(ps{a, b{a, c)) V ifis{c, d{a, c)). 

Define /(e) to be b{e, e) Ud(e, e). Then To proves b{e, e) C /(e) and d{e, e) C /(e). 
By substitution and monotonicity we have ips{e, f{e)) V (ps{e, f{e)), and hence 
(ps{e, f{e)), as required. 

Consider cut. By the inductive hypothesis we have terms b = 6(a, c) and d = 
d{a, c) satisfying 

(1) (ps{a,b{a,c))V tl;s{c,d{a,c)), 
and terms a' = a'{B, e) and / = f{B, e) satisfying 

(2) 3z -^^s{a'{B, e)[i],B{a'{B, e)) [z]) V 0s(e, /(B, e)). 
We need terms d' — d'{c' , e') and /' = /'(c', e') satisfying 

^5(c',d'(c',e'))V05(e',/'(c',e')). 

Given c' and e', and the terms b{a,c), d{a,c), a'{B,e), and f{B,e), define B' ~ 
\a b{a,c'), define a" ~ supj a'(i3', e'), and then define d' = d{a",c') and /' — 
f{B',e'). Since Tq proves S'(a") = 6(a",c'), from (P) we have 

Vs{a",B'{a"))yiJs{c',d'). 

Since a"[i] = o!{B' , e') for every z, from ([2]) we have 

-(ps(a",i?'(a"))V0s(e',/'). 

Applying cut in Qo Tq + (/), we have tps{c-\ d') V 0s (e', /'), as required. 

The treatment of V-introduction over N and O is straightforward. We can take 
the equahty axioms to be reflexivity, symmetry, transitivity, and congruence with 
respect to the basic function and relation symbols in the language. These, as well as 
the defining equations for primitive recursive function symbols in the language and 
the defining axioms for J, are verified by the fact that for formulas whose quantifiers 
ranging only over N , ip^ — (p. 

Thus we only have to deal with the other axioms of OID^ , namely, lu bounding, 
induction on N, and transfinite induction on 17. Note that if tp has quantifiers 
ranging only over N, the definition of 3 in terms of V implies that (3a ip{a))^' is 
equivalent to 3a 3i (p{a[i]). To interpret the translation of w-bounding, we therefore 
need to define a term (3 = (3{a) satisfying 

Va; 3i ips{x,a[i\) 3j Vx 3k (ps{x, {(3[j])[k]). 

Setting f3 = sup^ a means that for every j we have p[j] = a, so this /3 works. 

We can take induction on the natural numbers to be given by the rule "from 
(p{0) and (p{x) — ^ ip{x + 1) conclude Lp{t) for any term t." From a proof of the first 
hypothesis, we obtain a term b ~ 6(a) satisfying 

(3) Vs(0,a,6). 

From a proof of the second hypothesis, we obtain terms a' = a'{B',a") and b" = 
6"(S', a") satisfying 

(4) Vi ps{x, a'W, B'(a'H)) ^ ps{x + 1, a", b"). 

If suffices to define a function f{x,a) and show that we can prove 

(5) ips{x,dj{x,a)), 
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since if we then define b{a) = Uxf{x,a), we liave Lps{x,a,b) by the monotonicity 
property of our translation. Define / by 

/(O, a) -6(a) 

f{x + l,a) ^b"{\a f{x,a),a) 

Let B' denote \a f{x, a), so f{x + f , a) = b"{B' , a). Let A{x, d) denote the formula 
(HI). From jHl), we have yl(0, a), and from (g]) we have Vz A{x, a'{B', d)[i]) A{x + 
l,a). Using Proposition 14.11 we obtain A(x,a), as required. 

Transfinite induction, expressed as the rule "from (/?(e) and Vn iy9(a[n]) — > (f{a) 
conclude iy9(a)," is handled in a similar way. From a proof of the first hypothesis 
we obtain a term b = b{a) satisfying 

(6) (ps{e,a,b). 

From a proof of the second hypothesis we obtain terms a' = a'{a,B',a") and 
b" = b"{a,B',a") satisfying 

(7) "ii^n ^s{a[n],a'%B'{a'\i\)) ^ ^s{a,a" ,b"). 
It suffices to define a function / satisfying 

^s{a,a, f{a,a)) 

for every a and a, since then b — f{a,d) is the desired term. Let A(a,a) be this 
last formula, and define / by recursion on a: 

J., _ / b{a) if a = e 

/(a,aj- j b"{a,\a{Ujf{a[j],a)),a) otherwise. 

Write B' for the expression Xa {Ujf{a[j],a)), so we have f{a,a) — b"{a,B',a) 
when a ^ e. We will use the transfinite induction rule given by Proposition 14. II to 
show that A{a, a) holds for every a and a. From ([6]), we have A{e, a), so it suffices 
to show 

a e A Vn, i A{a[n\, a'[i]) — + A(a, a), 

where a' is the term a'{a,B',a). Arguing in QoTn + {I), assume a ^ e and 
Vn, « A(Q![n], a'[z]), that is, 

Vn, ? (/9S (a M , a' W , / (« M , a' M ) ) • 
By monotonicity, we have 

Vn, i ips{a[n],a[i],Ujf{a[]\,a[i])). 
By the definition of S', this is just 

Vn, z (/95 (a [n] , a' [i], B' {a' [i])) . 

By ([7]), this implies 

<Ps(a,a,/(a,a)), 

which is A{a,a) as required. This concludes the proof of Theorem 14.21 

Our theory QqTq + (/) is inspired by Feferman |12| . and, in particular, the 

theory denoted Tq + (/x) in [HI Section 9]. That theory, hke Qo Tq + (/), combines 

a classical treatment of quantification over the natural numbers with a constructive 

treatment of the finite types over fi. 

The principal novelty of our interpretation, however, is the use of the Diller- 

Nahm method in the clause for negation, and the resulting monotonicity property. 

This played a crucial rule in the interpretation of transfinite induction. The usual 
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Dialectica interpretation would require us to choose a single candidate for the failure 
of an inductive hypothesis, something that cannot be done constructively. Instead, 
using the Diller-Nahm trick, we recursively "collect up" a countable sequence of 
possible counterexamples. (The original Diller-Nahm trick involved using only finite 
sequences of counterexamples; we are grateful to Paulo Oliva for pointing out to 
us that the extension of the method to more general sequences of counterexamples 
seems to have been first used by Stein [32].) 

Similar uses of monotonicity can be found in functional interpretations developed 
by Kohlenbach [531 IM] and Ferreira and Oliva T3J , as well as in the forcing inter- 
pretations described in Avigad |5j. The functional interpretations of Avigad [4], 
Burr [10], and Ferreira and Oliva [13] also make use of the Diller-Nahm trick. But 
Kohlenbach, Ferreira, and Oliva rely on majorizability relations, which cannot be 
represented in Qo Tq , due to the restricted uses of quantification in that theory. 
Our interpretation is perhaps closest to the one found in Burr [lOj , but a key differ- 
ence is in our interpretation of universal quantification over the natural numbers; 
as noted above, because we are computing bounds and our functionals are closed 
under countable sequences, the universal quantifier is absorbed by the witnessing 
functional. 

5. Interpreting QoTs2 + {I) in QT^ 

The hard part of the interpretation is now behind us. It is by now well known that 
one can embed infinitary proof systems for classical logic in the various constructive 
theories listed in Theorem 12.41 This idea was used by Tait [34] , to provide a 
constructive consistency proof for the subsystem Ej-CA of second-order arithmetic. 
It was later used by Sieg [SO] [31] to provide a direct reduction of the classical theory 
ID I to the constructive theory IDg"^ , as well as the corresponding reductions for 
theories of transfinitely iterated inductive definitions (see Section [6]). Here we show 
that, in particular, one can define an infinitary proof system in QTq, and use it 
to interpret Qo Tq -\- (/) in a way that preserves 112 formulas. The methods are 
essentially those of Sieg [SO] [3T], adapted to the theories at hand. In fact, our 
interpretation yields particular witnessing functions in Tq , yielding Theorem 12.51 

Let us define the set of infinitary constant propositional formulas, inductively, 
as follows: 

• T and _L are formulas. 

• If (^0, V'l, (p2, . . . are formulas, so are Vjgw ^'^'^ l\ieN Vi- 

Take a sequent F to be a finite set of such formulas. As usual, we write F, A for 
F U A and r,^; for F U {(/j}. We define a cut-free infinitary proof system for such 
formulas with the following rules: 

• F, T is an axiom for each sequent F. 

• From F, ipi for some i conclude T,\/ tpi. 

• From F, tpi for every i conclude F, AigA? fi- 

We also define a mapping ip i— > -itp recursively, as follows: 

• = ± 

• ^± = T 

• ~^\/ieN'P^ = AjGAT 
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Note that the proof system does not include the cut rule, namely, "from F, and 
r, include F." In this section we will show that it is possible to represent 
prepositional formulas and infinitary proofs in the language of QTq in such a way 
that QT}2 proves that the set of provable sequents is closed under cut. We will then 
show that this infinitary proof system makes it possible to interpret Qg Tq + (/) 
in a way that preserves 112 sentences. This will yield Theorem 12.51 In fact, our 
interpretation will yield explicit functions witnessing the truth of the 112 from the 
proof in QoTn + (/). 

We can represent formulas in QTq as well-founded trees whose end nodes are 
labeled either T or ± and whose internal nodes are labeled either V or /\. A well- 
founded tree is simply an element of fi. As in the Appendix, if a is an element 
of r2, then one can assign to each node of a a unique "address," cr, where ct is a 
finite sequence of natural numbers. Since these can be coded as natural numbers, a 
labeling of a from the set {T, _L, \/j A} ^ function I from N to A^. The assertion 
that a, Hs a formula, i.e. that the labeling has the requisite properties, is given by 
a universal formula in QTq- Using A-abstraction we can define functions F with 
recursion of the following form: 



where denotes the sequence of length 0. This yields a principle of recursive 
definition on formulas, which can be used, for example, to define the map Lp — > -^p. 
(This particular function can be defined more simply by just switching T with _L 
and f\ with \J in the labeling.) A principle of induction on formulas is obtained 
in a similar way. We can now represent proofs as well-founded trees labeled by 
finite sets of formulas and rules of inference, yielding principles of induction and 
recursion on proofs as well. 

We will write h F for the assertion that F has an infinitary proof, and we will 
write h if instead of h {p}. The proofs of the following in QTq are now standard 
and straightforward (see, for example, [28l[3T] ). 

Lemma 5.1 (Weakening), //h F and F' D F then h F'. 

Lemma 5.2 (Excluded middle). For every formula Lp, h {(^, ^(^}. 

Lemma 5.3 (Inversion). 

• //h F,_L, then h F. 

• // I- F, Aiejv ^'^sn h F, pi for every i. 

The first and third of these is proved using induction on proofs in QT^2- The 
second is proved using induction on formulas. 

Lemma 5.4 (Admissibility of cut). // h F, (/? and h F, ^ip, then h F. 

Proof. We show how to cast the usual proof as a proof by induction on formulas, 
with a secondary induction on proofs. For any formula ip, define 



We express the claim to be proved as follows: 

For every formula p, for every proof d, the following holds: if d is a 
proof of a sequent of the form F, p'^ , then h F, ^((^s^) implies h F. 




G{1{9)) iia = e 

H{\n F{a[n],Xa Z((n)"(T))) otherwise, 




p if is T or of the form VieAf '^i 
-^p otherwise. 
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The most interesting case occurs when ip = Lp^ \s of the form View V'i; ^ind the last 
inference of d is of the form 



Given a proof of F, AieN "'V'i' ^PP^Y weakening and the inner inductive hypothesis 
for the immediate subproof of d to obtain a proof of F, ■i/'j, apply inversion to obtain 
a proof of F, -•■^j, and then apply the outer inductive hypothesis to the sub formula 



We now assign, to each formula in the language of Qo Tq + (/), an infini- 
tary formula (p{x). More precisely, to each formula ip){x) we assign a function F^{x) 
of Tq, in such a way that QTq proves "for every i, F,^(x) is an infinitary proposi- 
tional formula." We may as well take V, -i, and V to be the logical connectives of 
Qo Tq + (/), and use the Shoenfield axiomatization of predicate logic given in the 
last section. For formulas not involving the assignment is defined inductively 
as follows: 

• s = t\s equal to T if s = and _L otherwise. 

• (f\/ipis equal to \/ ■ 6j, where 60 = (p and 9j = tjj for j > 0. 

• yx^ip{x) is /\jP{j). 

• -^if is -ip. 

If / corresponds to the inductive definition ^{x, P), the interpretation of a; G /q, is 
defined recursively: 



The following lemma asserts that this interpretation is sound. 
Lemma 5.5. // QqTq + (/) proves (p{x), then QTq proves that for every x, h 



Proof. We simply run through the axioms and rules of inference in QqTq + (/). 
If s = t is a theorem of Tq, it is also a theorem of QTq. Hence QTq proves 
s = t = T , and so\- s = t. 

The interpretation of the logical axioms and rules arc easily validated in the 
infinitary propositional calculus augmented with the cut rule, and the interpretation 
of the defining axioms for /„ are trivially verified given the translation of f G /„. 
This leaves only induction on N and transfinite induction on Q.. We will consider 
transfinite induction on fi; the treatment of induction on is similar. 

We take transfinite induction to be given by the rule "from (p(e) and a ^ e A 
yn (p{a[n]) fia) conclude (^(0;)." Arguing in QqTq + (/), suppose for every 
instantiation of a and the parameters of ip there is an infinitary derivation of the 
translation of these hypothesis. Use transfinite induction to show that for every 
a there is an infinitary proof of <p{a). When a = e, this is immediate. In the 
inductive step wc have infinitary proofs of (^(Q![n]) for every n. Applying the /\- 

rule, we obtain an infinitary proof of Vn i^(a[n]), and hence, using ordinary logical 
operations in the calculus with cut, a proof of ^(a). □ 



-ilpj of p. 



□ 




(p{x). 
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We note that with a little more care, one can obtain cut-free proofs of the 
induction and transfinite induction axioms; see, for example, [7j. 

Lemma 5.6. Let if he a formula of the form Vi' Ely R{x,y), where R is primitive 
recursive. Then QTq proves that h (p implies ip. 

Proof. Using a primitive recursive coding of tuples we can assume, without loss of 
generality, that each of x and y is a single variable. Using the inversion lemma, it 
suffices to prove the statement for Ei formulas, which we can take to be of the form 
3y S{y) for some primitive recursive S. Use induction on proofs to prove the slightly 

more general claim that given any proof of either {3y <5'(y)} or {3y S{y), -L} there 
is a j satisfying S{j). In a proof of either sequent, the last rule rule can only have 

been a V rule, applied to a sequent of the form {S{j)} or {3y S{y), S{j)}. If S{j) 
equals T , j is the desired witness; otherwise, apply the inductive hypothesis. □ 

Putting the pieces together, we have shown: 

Theorem 5.7. Every II2 theorem of QqTq + (/) is a theorem of QT^j- 

Together with Theorems 13.11 and 14. 2[ this yields Theorem 12.51 Note that every 
time we used induction on formulas or proofs in the lemmas above, the arguments 
give explicit constructions that are represented by terms of Tq. So we actually 
obtain, from an IDi proof of a 112 sentence, a Tq term witnessing the conclusion 
and a proof that this is the case in QT^j. By Theorem 12.41 this can be converting 
to a proof in Tq, if desired. 

Our reduction of IDi to a constructive theory has been carried out in three steps, 
amounting, essentially, to a functional interpretation on top of a straightforward 
cut elimination argument. A similar setup is implicit in the interpretation of IDi 
due to Buchholz [7j, where a forcing interpretation is used in conjunction with an 
infinitary calculus akin to the one we have used here. We have also considered 
alternative reductions of Qo Tq + (/) that involve either a transfinite version of the 
Friedman ^-translation [14] or a transfinite version of the Dialectica interpretation. 
These yield interpretations of Qo Tq -\- (/) not in QTq, however, but in a Martin- 
Lof type theory MLi V with a universe and a type of well-founded sets [T]. MLi V 
is known to have the same strength as ID^ , but although many consider ML^ V 
to be a legitimate constructive theory in its own right, we do not know of any 
reduction of MLi V to one of the other constructive theories listed in Theorem l2.4l 
that does not subsume a reduction of ZDj . Thus the methods described in this 
section seem to provide an easier route to a stronger result. 

6. Iterating the interpretation 

In this section, we consider theories ZD„ of finitely iterated inductive definitions. 
These are defined in the expected way: /l?„+j bears the same relationship to ZD„ 
that IDi bears to PA. In other words, in IDn+i one can introduce a inductive 
definitions given by formulas il'{x, P), where ■(/' is a formula in the language of IDn 
together with the new predicate P, in which P occurs only positively. 

Writing Hq for N and fii for il, we can now define a sequence of theories Tq^. 
For each n > 1 take Tq^^^ to add to Tq^ a type fln+i of trees branching over 
0„, with corresponding constant e and functionals sup : (0„ f2ri+i) — > ^^n-i-i 
and sup^^ : fln+i {^n ^n+i)- Once again, we extend primitive recursion 



FUNCTIONAL INTERPRETATION AND INDUCTIVE DEFINITIONS 17 

in Tq^ to the larger system and add a principle of primitive recursion on f2n+i. 
The theories QTq^^^ are defined analogously. It is convenient to act as though for 
each i < j, is closed under unions indexed by Qf, this can arranged by fixing 
injections of each Qi into 

In this section, we show that our interpretation extends to IDn, to yield the 
following generalization of Theorem 12.51 

Theorem 6.1. Every II2 sentence provable in IDn is provable in QTq^ . 

As with Theorem 12. 5[ the proof yields a particular term witnessing the 112 as- 
sertion, and the correctness of that witnessing term can be established in Tq^ , by 
a generalization of Theorem 12.41 The interpretation can be further extended to 
theories of transfinitely iterated inductive definitions, as described in [9j. We do 
not, however, know of any ordinary mathematical arguments that are naturally 
represented in such theories. 

To extend the theories OIDi to theories OIDn, we first have to generalize the 
schema of a;-bounding. For each i < j, define the schema of Sli-rij-bounding as 
follows: 

Va^^- 3l3"' ip{a,f]) 3(3^^= Va^^' 37^^' (^(a,/?^). 

for every formula (f with quantifiers ranging over the types l^o, . . . , f^j. With this 
notation, the w-bounding schema is now corresponds to r2o-^i-bounding. 

We extend the theories OIDi to theories OIDn in the expected way, where now 
OIDn includes the schema of ri^-ilj -bounding for each i < j < n. The fixed points 
/i , . . . , /„ of IDn are interpreted iteratively according to the recipe in Section [S] In 
particular, ii'ijjj{x, P) is gives the definition of the jth inductively defined predicate 
/j, the translation of ipj has quantifiers ranging over at most f^j-i, and t S Ij is 
interpreted as 3a^^ (t S -(j,q), where the predicates Ij{a,x) are defined in analogy 
to/(Q!,x). This yields: 

Theorem 6.2. If ID n proves then OIDn proves (p. 

Next, we define theories Qn-i Tf2„ + (I) in analogy to the theory QqTq + (/) 
of Section HI except that we include the fii-fJj-bounding axioms for i < j < n in 
Qn-i Ta„ + (I)- Now it is quantification over the types Qq, . . . , fln-i that is consid- 
ered "small," and absorbed into the target theory. In particular, for i < j < n, the 
f2i-r2j -bounding axioms of OIDn are unchanged by the functional interpretation. 
The fli-fln bounding axioms for i < n, induction on N, and transfinite induction 
on rin are interpreted as in Section H) With the corresponding modifications to (p^ , 
we then have the analogue to Theorem l4.2l 

Theorem 6.3. Suppose OIDn proves (p, and ip^ is the formula Va 3b (ps{a,b). 
Then there are terms b of T[2„ involving at most the variables a and the free variables 
of ip of type rtn such that Qn-i Tq^ + (/) proves ipsia, b). 

In the last step, we have to embed Qn-i Tq^ + (/) into an infinitary proof system 
in QTq ■ The method of doing this is once again found in [301 131] . and an extension 
of the argument described in Section [5l We extend the definition of the infinitary 
propositional formulas so that when, for each a G Vtj with j < n, pa is a formula, 
so are Vasn Aaen Va- proof of cut elimination, and the verification 

of transfinite induction and the defining axioms for the predicates Ij{a,x), are 
essentially unchanged. The only additional work that is required is to handle the 
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bounding axioms; this is taken care of using a style of bounding argument that is 
fundamental to the ordinal analysis of such infinitary systems (see [2611271 130l l31 j ). 

Lemma 6.4. For every i < j < n, QT^2„ proves the translation of the fli-flj 
bounding axioms. 

Proof (sketch). Since establishes the provability of the law of the excluded 

middle in the infinitary language, it suffices to show that for every sequent F with 
quantifiers ranging over at most Ui, if h- r,Va^* 3f3^^ (p{a,(3), then there is a 
P in W such that for every a in fi^, h 37^* (f{a,P['y]). But this is essentially a 
consequence of the "Boundedness lemma for E" in Sieg [311 page 16 2]; the requisite 
P is defined by an explicit recursion on the derivation. □ 



This gives us the proper analogue of Theorem 15.71 a-nd hence Theorem 16.1 
Theorem 6.5. Every U2 theorem of Qn-i Tq^ + (/) is a theorem of QT}^^. 

Appendix: Kreisel's trick and induction with parameters 



For completeness, we sketch a proof of Proposition l2.3l Full details can be found 

in \mM. 



Proposition l273l The following is a derived rule of Tq: 

(p(e, x) a ^ e t\ ip{o\g(a^ x)], h{a, x)) <p(a, x) 
Lp{s,t) 

for quantifier-free formulas if. 

Proof. We associate to each node of an element of a finite sequence a of natural 
numbers, where the ith child of the node corresponding to a is assigned ^'{i). Then 
the subtree Ua- of a rooted at a (or e if cr is not a node of a) can be defined by 
recursion on as follows: 



(sup/)^ 



sup / if (7 = 
ifit))r ifa=(z)V 



Here denotes the sequence of length 0. 

Now, given if, g, and h as in the statement of the lemma, we define a function 
k(a,x,n) by primitive recursion on n. The function k uses the the second clause 
of the rule to compute a sequence of pairs (cr, y) with the property that ip{aa,y) 
implies </?(a, x). For readability, we fix a and x and write k{n) instead of k{a, x, n). 
We also write fco(n) for (fc(n))o and ki{n) for {k{n))i. 

,x) 

{ko{ny(g{ako(n),ki{n))), 




k(n) otherwise. 

Ordinary induction on the natural numbers shows that for every n, 'p(afeo(n), ki(n)) 
implies ip{a,x). So, it suffices to show that for some n, Q!fcj,(„) = e. 

Since A:o(0) C fco(l) ^ ^o(2) C ... is an increasing sequence of sequences, it 
suffices to establish the more general claim that for every a and every function / 
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from N to N, there is an n such that Q!(/(o),...,/(ri-i)) — e. To that end, by recursion 
on Q, define 



5(«,/) = 



l+5(a[/(0)],An/(n+f)) if a ^ e 
otherwise 



Let h{m) = g{a{f{o)^...j{m-i)), An f{n + m)). By induction on m we have h{0) = 
m + h{m) as long as a(/(o),...,/(m-i)) 7^ e. In particular, setting m = h{0), we have 
h{h{0)) — 0, which implies a{f(o)^...j{h(o)-i)) = e, as required. □ 

The following principles of induction and recursion were used in Section |3) 
Proposition l47ll The following are derived rules of Qg Tq: 

9{e, x) a ^ e A\/i \/j 0{a[i], f(a, x, i,j)) 6{a, x) 
9{a, x) 

and 

■0(0, a;) Vj tp{n,f{x,n,j)) ^/j{n + l,x) 



h{a,g,a) 



ip{n,x) 

Proof. Consider the first rule. For any element a of ft and finite sequence of natural 
numbers a (coded as a natural number), once again we let a^- denote the subtree 
of a rooted at a. Let r be the type of x. We will define a function /i(a, g, a) by 
recursion on a, which returns a function of type N ^ t, with the property that 
/i(a, 0) = 5, and for every cr, 0{aa-,x) holds for every x in the range of h{a, g, a). 
Applying the conclusion to h{a, Xi x, 0) will yield the desired result. 
The function h is defined as follows: 

g ifa = eor(T = 

h{a[i], XI f{a, g{lo),i, Zi), a') if a ^ e and a — <j'''{i) 

Using transfinite induction on a, we have 

Vcr Vu 9{a^,h(a, g, cr){v)) 

for every a, and hence and hence 9{a, h{a, Xi a:,0)(O)). Since h{a,Xi x, 0)(O) = 
{Xi x){0) = X, we have the desired conclusion. 

The second rule is handled in a similar way. □ 
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